Jorgson

Jorgson is a security researcher credited with 12 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #425 of 3,878 contributors. Their disclosures were published between 2021 and 2026. The most productive year was 2026, with 4 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 10 of their findings (83%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type. The average CVSS score across these disclosures is 6.4, peaking at 7.2. Severity breakdown: 0 critical and 4 high.

The most affected software includes AdRotate Banner Manager (1), AGCA (1), CMB2 (1), across 12 distinct plugins, themes and core versions in total.

All 12 disclosed issues have since received a vendor fix.

202120222023202420252026

Critical

High

Medium

Low

Global Rank

#425

of 3,878 researchers

Vulns

Critical0

High4

Medium8

Low0

Affected Assets

12plugins

Avg CVSS

6.4

Average score of vulnerabilities

Researcher Submissions

12 records


2026-09-30 09:25	CMB2 <= 2.13.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting CMB2 <= 2.13.0	`CVE-2026-97270`	6.4 Medium	Jorgson	Yes
2026-09-02 00:00	YITH Request a Quote for WooCommerce Premium < 4.46.0 - Missing Authorization YITH Request a Quote for WooCommerce < 4.46.0	`CVE-2026-84238`	5.3 Medium	Jorgson	Yes
2026-08-19 00:00	SmartSMTP <= 1.2.0 - Unauthenticated Stored Cross-Site Scripting SmartSMTP <= 1.2.0	`CVE-2026-66606`	7.2 High	Jorgson	Yes
2026-08-14 00:00	Site Reviews <= 8.2.0 - Unauthenticated Stored Cross-Site Scripting Site Reviews <= 8.2.0	`CVE-2026-73382`	7.2 High	Jorgson	Yes
2025-06-02 10:16	WordPress Comments Import & Export <= 2.4.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting Comments Import & Export <= 2.4.3	`CVE-2025-3919`	6.4 Medium	Jorgson	Yes
2025-05-07 17:42	WP SEO Structured Data Schema <= 2.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings WP SEO Structured Data Schema <= 2.7.11	`CVE-2025-4127`	6.4 Medium	Jorgson	Yes
2024-09-24 12:15	Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form Contact Form to Any API <= 1.2.4	`CVE-2024-7617`	7.2 High	Jorgson	Yes
2024-08-19 00:00	AdRotate – Ad manager & AdSense Ads <= 5.13.2 - Authenticated (Admin+) Double Extension Arbitrary File Upload AdRotate Banner Manager <= 5.13.2	`CVE-2022-1206`	7.2 High	Jorgson	Yes
2022-07-29 00:00	Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting Simple SEO <= 1.7.91	`CVE-2022-1628`	6.4 Medium	Jorgson	Yes
2021-10-11 13:37	WP Project Manager <= 2.4.13 - Authenticated Stored Cross-Site Scripting Project Manager <= 2.4.13	`CVE-2021-36826`	5.4 Medium	Jorgson	Yes

Showing 1–10 of 12 reports